Some functional operation questions about MeshCommander.

[tedlee0502]

1. Why does the function of saving state take a lot of time to complete? The state jason file size is 1.2 MB takes about 3 minutes to save entire Intel AMT state. (System Status->Save State)

2. Can't change Link policy settings at network settings.

3. Unable to remove issue certificate by MeshCommander. (Create certificate by adding certificate it can be deleted)

4. Can't use certificate by adding certificate. It can use issue certificate by MeshCommander.

[Ylianst]

let me see if I can answer these:

1. Saving the entire state requires 100's on network round trips with HTTP POST calls to the Intel Management Engine (Intel ME) that is not a fast processor. If there is any tricks to reduce the number of round trips, I would be very interested in knowing.
2. This may be a bug, I would have to look. This should be a separate issue and I would need to know what Intel AMT version you have.
3. If a certificate is currently being used for TLS or some other use, it can't be removed unless you remove it's use first. I don't know the details of your situation, but this is my best guess.
4. Sorry, I don't understand this question.

Hope it helps, Ylian

[tedlee0502]

Hi Ylian:

Good day. Thank you for your reply.

2. Intel AMT version is 11.8.50

3. When I first create it by Issue Certificate, it can be deleted before it is used. But when I use it then cancel it, it cannot be deleted.

4. When I import a root CA in MeshCommander, it can be seen at drop down menu.

[jsastriawan]

For number 2, potentially there is TLS session using this certificate. For example if you are currently connected to this machine using TLS, although you disable TLS, TLS session is still running. Thus you cannot delete it. You could try to disconnect your Meshcommander session and use non TLS connection to delete the certificate.

[tedlee0502]

Hi jsastriawan:

Thank you for your reply. I tested it according to the method you provided but it can't be deleted.

[tedlee0502]

Good day. Can it be fixed at next version of MeshCommander ? (Q2, Q3, Q4) Can we know when the next version will be released ?

[coddec]

Seems this https://dannyda.com/2020/07/03/how-to-fix-meshcommander-unable-to-remove-certificate-error-400-intel-amt/ Works for Q3? Encountered same issue, Error 400, tried this method, works fine.

[jacobopantoja]

Hi @Ylianst, I cannot change the Link policy, and in one of my machines I think it is rendering the ME inaccessible after a few days (the machine is still accessible, though, but not the AMT interface). I'm using 0.8.8 in Linux